Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleDoes your organisation have a testing process to test business critical applications before they are deployed, to ensure there is no adverse impact on operations or security?

Does your organisation have a testing process to test business critical applications before they are deployed, to ensure there is no adverse impact on operations or security?

Snyk is run with each deployment, automated end-to-end, integration and unit testing on each deployment, manual code review and QA on each deployment.

Expand
titleDoes your organisation segregate its production environment from any testing or development environments?

Does your organisation segregate its production environment from any testing or development environments?

Yes, we operate separate environments for development, staging, pre-production and production. Engineers are only granted access as required to perform their duties.

Expand
titleDoes your organisation monitor the capacity of its systems processing client information to make sure they are able to cope with load?

Does your organisation monitor the capacity of its systems processing client information to make sure they are able to cope with load?

Yes, we utilise a range of tools to assist here including AWS controls and Kubernetes for auto scaling, plus auto-scaling with Mongo Atlas.

Expand
titleDoes your organisation manage and control the use of, and access to, any cryptographic keys?

Does your organisation manage and control the use of, and access to, any cryptographic keys?

Yes, our Cryptographic Controls Policy is available on request from customers@commonplace.is